Function TestAccessQuery

db/query_test.go:251–298

(t *testing.T)

}

func TestAccessQuery(t *testing.T) {

	if base.TestsDisableGSI() {
		t.Skip("This test is Couchbase Server and UseViews=false only")
	}

	db, ctx := setupTestDB(t)
	defer db.Close(ctx)
	collection, ctx := GetSingleDatabaseCollectionWithUser(ctx, t, db)

	collection.ChannelMapper = channels.NewChannelMapper(ctx,
		`function(doc, oldDoc) {
	access(doc.accessUser, doc.accessChannel)
}`,
		db.Options.JavascriptTimeout)
	// Add docs with access grants assignment
	for i := 1; i <= 5; i++ {
		_, _, err := collection.Put(ctx, fmt.Sprintf("accessTest%d", i), Body{"accessUser": "user1", "accessChannel": fmt.Sprintf("channel%d", i)})
		assert.NoError(t, err, "Put accessTest doc")
	}

	// Standard query
	username := "user1"
	results, queryErr := collection.QueryAccess(base.TestCtx(t), username)
	assert.NoError(t, queryErr, "Query error")
	var row map[string]interface{}
	rowCount := 0
	for results.Next(ctx, &row) {
		rowCount++
	}
	assert.Equal(t, 5, rowCount)
	assert.NoError(t, results.Close())

	// Attempt to introduce syntax errors. Each of these should return zero rows and no error.
	// Validates select clause protection
	usernames := []string{"user1'", "user1?", "user1 ! user2$"}
	// usernames = append(usernames, "user1`AND") // TODO: MB-50619 - broken until Server 7.1.0
	for _, username := range usernames {
		results, queryErr = collection.QueryAccess(base.TestCtx(t), username)
		assert.NoError(t, queryErr, "Query error")
		rowCount = 0
		for results.Next(ctx, &row) {
			rowCount++
		}
		assert.Equal(t, 0, rowCount)
		assert.NoError(t, results.Close())
	}
}

func TestRoleAccessQuery(t *testing.T) {
	db, ctx := setupTestDB(t)